The rules are now read from $FG_ROOT/Nasal/IOrules or, if
available, $FG_HOME/Nasal/IOrules. That way people who don't
have write permission for $FG_HOME/Nasal/io.nas can still
extend and modify the rules. The default is:

  READ ALLOW $FG_ROOT/*
  READ ALLOW $FG_HOME/*
  WRITE ALLOW $FG_HOME/Export/*

This can be overridden with a file $FG_HOME/Nasal/IOrules
that is either empty, or contains these rules:

  READ DENY *
  WRITE DENY *

Should we use the more restrictive rules by default? Note,
however, that file access via fgcommand() isn't affected by
the rules at all. There's only an ".xml" extension enforced
by, and it will abort if the file isn't a <PropertyList>.
This should be safe enough.

m.

-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
_______________________________________________
Flightgear-devel mailing list
Flightgear-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/flightgear-devel

Reply via email to